CVE-2023-27524 — Vulnerability intelligence

Apache — Superset

Published: 2023-04-24T15:28:16.573Z

CVSS

8.9

CISA KEV

Known exploitation

Original source text (not a translation)

Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.

Sources

• Apache Superset Insecure Default Initialization of Resource Vulnerability
• Original advisory
• Original advisory
• CVE-2023-27524